IBM Security Verify Bridge Information Disclosure Vulnerability (CNVD-2021-77465)

IBM Security Verify Bridge is an IBM application component of International Business Machines (IBM), Inc. Provides IBM Cloud access to user attributes and authentication that are controlled by the customer’s local LDAP or Active Directory. IBM Security Verify Bridge has an information disclosure vulnerability that stems from the acquisition of sensitive information due to incorrect certificate validation, which can be exploited by an attacker to Obtain sensitive information.